IT - SCDHHS - Security Analyst - Consultant

Abacus Service Corporation

  • Columbia, SC
  • 1 day ago

    Highlights

    Position Type Staff Augmentation Hours/Week 40 Billing Type Hourly Shift Day Projected Start Date 10/27/2026 Start Time 8:00 AM Projected End Date/Duration 12 Months from projected start date End Time 5:00 PM Bid Limit Per Vendor 2 Number of Positions 1 Desired Career Level Experienced Non-manager Minimum Education Level Bachelor's Degree Weekend None Position Location. Team Size: 10+ Dress Code: Business Casual, occasionally more formal Primary Work Location: 1801 Main Street, Columbia, SC 29201 location: Fully onsite 5 days/week.

    Numbers & Facts

    LocationColumbia, SC

    Description

    Position Information

    Position Type Staff Augmentation Hours/Week 40
    Billing Type Hourly Shift Day
    Projected Start Date 10/27/2026 Start Time 8:00 AM
    Projected End Date/Duration 12 Months from projected start date End Time 5:00 PM
    Bid Limit Per Vendor 2 Number of Positions 1
    Desired Career Level Experienced Non-manager Minimum Education Level Bachelor's Degree
    Weekend None

    Position Location

    Address 1801 Main Street City Columbia
    State South Carolina Zip 29201
    Country UNITED STATES

    Requirements

    Travel Required No Security Required Yes
    Onboarding Category

    The following are required for bid submission:
    • Resume
    • R2R
    • Cover Letter
    • Meets Work Location

    Position Description

    Please ensure you attach the SC Cover Sheet (attached), a valid Right to Represent, and the candidate's resume with full legal first name, and last name. Withdrawn candidates will not be permitted to be replaced. If you would like to use a sub vendor, only 1 level deep, please submit the Sub Vendor usage form.

    The State of South Carolina is looking for a Security Analyst - Consultant
    Why is this position open: New Position - ongoing project with the Office of Cybersecurity. This is a repost of 13757 - DO NOT submit resources that were previously submitted to posting ID 13757.
    Will close to submissions on 11/03 at 5:00PM EST.
    Interview Process: 2 rounds - 1st interview will be virtual, 2nd round will be onsite in Columbia, SC (Onsite interview will be non-negotiable)
    Duration of the Contract: 12 months
    Possibility for Extension: Yes
    Work Location: Fully Onsite
    Candidate Location: Candidate MUST be a SC resident. No relocation allowed.
    Vendors are responsible for accurately representing the current location of their resources. Any misrepresentation regarding a resource's location, including presenting a non-local resource as being located in South Carolina, may result in further review and corrective action.

    Full job description attached & required/preferred skills are stated below.

    SCOPE OF THE PROJECT:
    The Office of Cybersecurity ensures the confidentiality, integrity and availability of SCDHH's systems and services. Strong candidate must have hands-on experience with:
    " Data network design best practices
    " Routing and switching protocols
    " Network security best practices
    " On-premise and/or cloud networking environments
    " This role requires someone who can contribute independently on technical tasks and support more senior analysts on complex initiatives.

    DAILY DUTIES / RESPONSIBILITIES:
    This is a hands-on technical role reporting to the Office of Cybersecurity SOC lead.
    The analyst will support SCDHHS leadership, business units, partners, and vendors in day-to-day cybersecurity operations.
    Security Program Experience:
    Strongly desired experience includes:
    " CMS ARC-AMPE, HIPAA, NIST or other FISMA RMF frameworks
    " Performing repeatable security processes supporting compliant enterprise architectures
    " Supporting security considerations for multi tenant cloud environments and vendor integrations

    Technical Experience:
    Candidates should have hands-on experience with:
    1. Secure network design principles
    2. Windows, macOS, and Linux operating systems
    3. Switching and Routing
    4. Enterprise Firewalls
    5. Network auditing
    6. IDS/IPS platforms
    7. Network security monitoring
    8. SIEM platforms such as QRadar, Splunk (Preferred)
    9. Vulnerability scanning tools (Nessus, Qualys, etc.)
    10. Cloud Infrastructure Security (Preferred)

    Essential Responsibilities:
    1. Assist in maturing network security and compliance solutions
    2. Investigate and respond to daily network alerts
    3. Perform network security assessments for proposed firewall and infrastructure changes
    4. Conduct technical analysis for network security planning and engineering
    5. Review and assessment of connectivity, website block and firewall rule requests to ensure they do not present an elevated risk to the agency
    6. Analyze on-premise and cloud networks for potential threats
    7. Develop, review, and analyze network traffic reports that violate the agency's approved standards governing Ports, Protocols and Services.
    8. Monitor emerging threat vectors and recommend countermeasures
    9. Collaborate with other areas of the agency to implement security controls
    10. Support cloud and on-premise network changes and enhancement projects
    11. Ensure compliance with ARC-AMPE, HIPAA and SCDIS-200
    12. Assist with KPI creation and trend report monitoring
    13. Participate in firewall configuration reviews and ruleset recertification
    14. Provide guidance on best practices to technical teams
    15. Perform additional SOC duties as assigned

    REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):

    1. Approximately 3-5 years of hands-on experience in network design, implementation, or support
    2. Hand-on experience in IT security or system administration
    3. Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models
    4. Ability to analyze logs, alerts, and network telemetry.
    5. Proficiency with Microsoft Office tools

    PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):
    1. Experience working in regulatory environments
    2. Experience supporting health IT or state government.
    3. Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards
    4. Cloud network security controls (Azure or AWS).

    REQUIRED EDUCATION/CERTIFICATIONS:
    1. BS degree in Computer Science, information systems, Cybersecurity, or related field; or equivalent experience
    2. A network security centric certification such as PCNSE or CCNA

    PREFERRED EDUCATION/CERTIFICATIONS:
    1. CISSP or Security+

    Required Skills

    Skill Type
    Skill Name
    BS degree in Computer Science, information systems, Cybersecurity, or related field; or 5+ years equivalent experience
    A network security centric certification such as PCNSE or CCNA
    3-5 years of hands-on experience in network design, implementation, or support
    Experience in IT security or system administration
    Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models
    Ability to analyze logs, alerts, and network telemetry.
    Proficiency with Microsoft Office tools

    Preferred Skills

    Skill Type
    Skill Name
    CISSP or Security+
    Experience working in regulatory environments
    Experience supporting health IT or state government.
    Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards
    Cloud network security controls (Azure or AWS).

    Attachment:
    Team Size:
    10+
    Dress Code: Business Casual, occasionally more formal
    Primary Work Location:
    1801 Main Street, Columbia, SC 29201
    location:
    Fully onsite 5 days/week

    Resources will be required to interview onsite for the second round interview.

    Only submit resources that are local to south Carolina and willing to come onsite 5 days/week.

    Vendors are responsible for accurately representing the current location of their resources. Any misrepresentation regarding a resource's location, including presenting a non-local resource as being located in South Carolina, may result in further review and corrective action.
    Company / Department culture (why do you enjoy working for the company selling points for potential candidates):

    This is an ongoing project with aggressive timelines. A majority of the team is made up of experienced professionals, and we are seeking individuals who are highly productive, flexible, and comfortable working in an environment where priorities can shift. Team members are expected to contribute with minimal supervision.

    Candidates who enjoy complex, change-driven projects and collaborating with motivated colleagues will find this position appealing.
    Why is this position open ( new role, increased workload, new dept, resignation, promotion)?

    New Role - This is a repost of 13757 - DO NOT submit resources that were previously submitted to posting ID 13757.
    Scope of the project:

    The Office of Cybersecurity ensures the confidentiality, integrity and availability of SCDHH's systems and services. Strong candidate must have hands-on experience with:
    • Data network design best practices
    • Routing and switching protocols
    • Network security best practices
    • On-premise and/or cloud networking environments
    • This role requires someone who can contribute independently on technical tasks and support more senior analysts on complex initiatives.
    Position Title: Junior Network Security Analyst
    Pre-employment Checks (drug, credit, criminal, motor vehicle)?
    Criminal, drug, credit, motor vehicle
    Daily Duties / Responsibilities:

    This is a hands-on technical role reporting to the Office of Cybersecurity SOC lead.

    The analyst will support SCDHHS leadership, business units, partners, and vendors in day-to-day cybersecurity operations.

    Security Program Experience:

    Strongly desired experience includes:
    • CMS ARC-AMPE, HIPAA, NIST or other FISMA RMF frameworks
    • Performing repeatable security processes supporting compliant enterprise architectures
    • Supporting security considerations for multi tenant cloud environments and vendor integrations

    Technical Experience:

    Candidates should have hands-on experience with:
    1. Secure network design principles
    2. Windows, macOS, and Linux operating systems
    3. Switching and Routing
    4. Enterprise Firewalls
    5. Network auditing
    6. IDS/IPS platforms
    7. Network security monitoring
    8. SIEM platforms such as QRadar, Splunk (Preferred)
    9. Vulnerability scanning tools (Nessus, Qualys, etc.)
    10. Cloud Infrastructure Security (Preferred)
    Essential Responsibilities:
    1. Assist in maturing network security and compliance solutions
    1. Investigate and respond to daily network alerts
    1. Perform network security assessments for proposed firewall and infrastructure changes
    1. Conduct technical analysis for network security planning and engineering
    1. Review and assessment of connectivity, website block and firewall rule requests to ensure they do not present an elevated risk to the agency
    1. Analyze on-premise and cloud networks for potential threats
    1. Develop, review, and analyze network traffic reports that violate the agency's approved standards governing Ports, Protocols and Services.
    1. Monitor emerging threat vectors and recommend countermeasures
    1. Collaborate with other areas of the agency to implement security controls
    1. Support cloud and on-premise network changes and enhancement projects
    1. Ensure compliance with ARC-AMPE, HIPAA and SCDIS-200
    1. Assist with KPI creation and trend report monitoring
    1. Participate in firewall configuration reviews and ruleset recertification
    1. Provide guidance on best practices to technical teams
    1. Perform additional SOC duties as assigned

    Required Skills (rank in order of Importance):
    1. Approximately 3-5 years of hands-on experience in network design, implementation, or support
    2. Hand-on experience in IT security or system administration
    3. Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models
    4. Ability to analyze logs, alerts, and network telemetry.
    5. Proficiency with Microsoft Office tools
    Preferred Skills (rank in order of Importance):
    1. Experience working in regulatory environments
    2. Experience supporting health IT or state government.
    3. Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards
    4. Cloud network security controls (Azure or AWS).



    Required Education/Certifications:
    1. BS degree in Computer Science, information systems, Cybersecurity, or related field; or equivalent experience
    2. A network security centric certification such as PCNSE or CCNA
    Preferred Education/Certifications:
    1. CISSP or Security+

    By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at Privacy Policy - Abacus.

    Similar Jobs